1ab25eeb5Syz155240 /* 2ab25eeb5Syz155240 * Copyright (C) 1997-2003 by Darren Reed. 3ab25eeb5Syz155240 * 4ab25eeb5Syz155240 * See the IPFILTER.LICENCE file for details on licencing. 5ab25eeb5Syz155240 * 6ab25eeb5Syz155240 * Copyright 2006 Sun Microsystems, Inc. All rights reserved. 7ab25eeb5Syz155240 * Use is subject to license terms. 8ab25eeb5Syz155240 */ 9ab25eeb5Syz155240 10ab25eeb5Syz155240 #pragma ident "%Z%%M% %I% %E% SMI" 11ab25eeb5Syz155240 12ab25eeb5Syz155240 #if defined(KERNEL) || defined(_KERNEL) 13ab25eeb5Syz155240 # undef KERNEL 14ab25eeb5Syz155240 # undef _KERNEL 15ab25eeb5Syz155240 # define KERNEL 1 16ab25eeb5Syz155240 # define _KERNEL 1 17ab25eeb5Syz155240 #endif 18ab25eeb5Syz155240 #include <sys/errno.h> 19ab25eeb5Syz155240 #include <sys/types.h> 20ab25eeb5Syz155240 #include <sys/param.h> 21ab25eeb5Syz155240 #include <sys/time.h> 22ab25eeb5Syz155240 #include <sys/file.h> 23ab25eeb5Syz155240 #if !defined(AIX) 24ab25eeb5Syz155240 # include <sys/fcntl.h> 25ab25eeb5Syz155240 #endif 26ab25eeb5Syz155240 #if !defined(_KERNEL) && !defined(__KERNEL__) 27ab25eeb5Syz155240 # include <stdio.h> 28ab25eeb5Syz155240 # include <string.h> 29ab25eeb5Syz155240 # include <stdlib.h> 30ab25eeb5Syz155240 # include <ctype.h> 31ab25eeb5Syz155240 # define _KERNEL 32ab25eeb5Syz155240 # ifdef __OpenBSD__ 33ab25eeb5Syz155240 struct file; 34ab25eeb5Syz155240 # endif 35ab25eeb5Syz155240 # include <sys/uio.h> 36ab25eeb5Syz155240 # undef _KERNEL 37ab25eeb5Syz155240 #endif 38ab25eeb5Syz155240 #if !defined(linux) 39ab25eeb5Syz155240 # include <sys/protosw.h> 40ab25eeb5Syz155240 #endif 41ab25eeb5Syz155240 #include <sys/socket.h> 42ab25eeb5Syz155240 #if defined(_KERNEL) 43ab25eeb5Syz155240 # if !defined(__NetBSD__) && !defined(sun) && !defined(__osf__) && \ 44ab25eeb5Syz155240 !defined(__OpenBSD__) && !defined(__hpux) && !defined(__sgi) && \ 45ab25eeb5Syz155240 !defined(AIX) 46ab25eeb5Syz155240 # include <sys/ctype.h> 47ab25eeb5Syz155240 # endif 48ab25eeb5Syz155240 # include <sys/systm.h> 49ab25eeb5Syz155240 # if !defined(__SVR4) && !defined(__svr4__) 50ab25eeb5Syz155240 # include <sys/mbuf.h> 51ab25eeb5Syz155240 # endif 52ab25eeb5Syz155240 #endif 53ab25eeb5Syz155240 #if defined(_KERNEL) && (__FreeBSD_version >= 220000) 54ab25eeb5Syz155240 # include <sys/filio.h> 55ab25eeb5Syz155240 # include <sys/fcntl.h> 56ab25eeb5Syz155240 # if (__FreeBSD_version >= 300000) && !defined(IPFILTER_LKM) 57ab25eeb5Syz155240 # include "opt_ipfilter.h" 58ab25eeb5Syz155240 # endif 59ab25eeb5Syz155240 #else 60ab25eeb5Syz155240 # include <sys/ioctl.h> 61ab25eeb5Syz155240 #endif 62ab25eeb5Syz155240 #if defined(__SVR4) || defined(__svr4__) 63ab25eeb5Syz155240 # include <sys/byteorder.h> 64ab25eeb5Syz155240 # ifdef _KERNEL 65ab25eeb5Syz155240 # include <sys/dditypes.h> 66ab25eeb5Syz155240 # endif 67ab25eeb5Syz155240 # include <sys/stream.h> 68ab25eeb5Syz155240 # include <sys/kmem.h> 69ab25eeb5Syz155240 #endif 70ab25eeb5Syz155240 #if __FreeBSD__ > 2 71ab25eeb5Syz155240 # include <sys/queue.h> 72ab25eeb5Syz155240 #endif 73ab25eeb5Syz155240 #include <net/if.h> 74ab25eeb5Syz155240 #ifdef sun 75ab25eeb5Syz155240 # include <net/af.h> 76ab25eeb5Syz155240 #endif 77ab25eeb5Syz155240 #include <net/route.h> 78ab25eeb5Syz155240 #include <netinet/in.h> 79ab25eeb5Syz155240 #include <netinet/in_systm.h> 80ab25eeb5Syz155240 #include <netinet/ip.h> 81ab25eeb5Syz155240 #ifndef linux 82ab25eeb5Syz155240 # include <netinet/ip_var.h> 83ab25eeb5Syz155240 #endif 84ab25eeb5Syz155240 #include <netinet/tcp.h> 85ab25eeb5Syz155240 #include <netinet/udp.h> 86ab25eeb5Syz155240 #include <netinet/ip_icmp.h> 87ab25eeb5Syz155240 #include "netinet/ip_compat.h" 88ab25eeb5Syz155240 #include <netinet/tcpip.h> 89ab25eeb5Syz155240 #include "netinet/ip_fil.h" 90ab25eeb5Syz155240 #include "netinet/ip_nat.h" 91ab25eeb5Syz155240 #include "netinet/ip_state.h" 92ab25eeb5Syz155240 #include "netinet/ip_proxy.h" 93ab25eeb5Syz155240 #if (__FreeBSD_version >= 300000) 94ab25eeb5Syz155240 # include <sys/malloc.h> 95ab25eeb5Syz155240 #endif 96ab25eeb5Syz155240 97ab25eeb5Syz155240 #include "netinet/ip_ftp_pxy.c" 98ab25eeb5Syz155240 #include "netinet/ip_rcmd_pxy.c" 99ab25eeb5Syz155240 # include "netinet/ip_pptp_pxy.c" 100ab25eeb5Syz155240 #if defined(_KERNEL) 101ab25eeb5Syz155240 # include "netinet/ip_irc_pxy.c" 102ab25eeb5Syz155240 # include "netinet/ip_raudio_pxy.c" 103ab25eeb5Syz155240 # include "netinet/ip_h323_pxy.c" 104ab25eeb5Syz155240 # include "netinet/ip_netbios_pxy.c" 105ab25eeb5Syz155240 #endif 106ab25eeb5Syz155240 #include "netinet/ip_ipsec_pxy.c" 107ab25eeb5Syz155240 #include "netinet/ip_rpcb_pxy.c" 108ab25eeb5Syz155240 109ab25eeb5Syz155240 /* END OF INCLUDES */ 110ab25eeb5Syz155240 111ab25eeb5Syz155240 #if !defined(lint) 112ab25eeb5Syz155240 static const char rcsid[] = "@(#)$Id: ip_proxy.c,v 2.62.2.14 2005/06/18 02:41:33 darrenr Exp $"; 113ab25eeb5Syz155240 #endif 114ab25eeb5Syz155240 115ab25eeb5Syz155240 static int appr_fixseqack __P((fr_info_t *, ip_t *, ap_session_t *, int )); 116ab25eeb5Syz155240 117ab25eeb5Syz155240 #define AP_SESS_SIZE 53 118ab25eeb5Syz155240 119ab25eeb5Syz155240 #if defined(_KERNEL) 120ab25eeb5Syz155240 int ipf_proxy_debug = 0; 121ab25eeb5Syz155240 #else 122ab25eeb5Syz155240 int ipf_proxy_debug = 2; 123ab25eeb5Syz155240 #endif 124ab25eeb5Syz155240 ap_session_t *ap_sess_tab[AP_SESS_SIZE]; 125ab25eeb5Syz155240 ap_session_t *ap_sess_list = NULL; 126ab25eeb5Syz155240 aproxy_t *ap_proxylist = NULL; 127ab25eeb5Syz155240 aproxy_t ap_proxies[] = { 128ab25eeb5Syz155240 #ifdef IPF_FTP_PROXY 129ab25eeb5Syz155240 { NULL, "ftp", (char)IPPROTO_TCP, 0, 0, ippr_ftp_init, ippr_ftp_fini, 130ab25eeb5Syz155240 ippr_ftp_new, NULL, ippr_ftp_in, ippr_ftp_out, NULL }, 131ab25eeb5Syz155240 #endif 132ab25eeb5Syz155240 #ifdef IPF_IRC_PROXY 133ab25eeb5Syz155240 { NULL, "irc", (char)IPPROTO_TCP, 0, 0, ippr_irc_init, ippr_irc_fini, 134ab25eeb5Syz155240 ippr_irc_new, NULL, NULL, ippr_irc_out, NULL, NULL }, 135ab25eeb5Syz155240 #endif 136ab25eeb5Syz155240 #ifdef IPF_RCMD_PROXY 137ab25eeb5Syz155240 { NULL, "rcmd", (char)IPPROTO_TCP, 0, 0, ippr_rcmd_init, ippr_rcmd_fini, 138ab25eeb5Syz155240 ippr_rcmd_new, NULL, ippr_rcmd_in, ippr_rcmd_out, NULL, NULL }, 139ab25eeb5Syz155240 #endif 140ab25eeb5Syz155240 #ifdef IPF_RAUDIO_PROXY 141ab25eeb5Syz155240 { NULL, "raudio", (char)IPPROTO_TCP, 0, 0, ippr_raudio_init, ippr_raudio_fini, 142ab25eeb5Syz155240 ippr_raudio_new, NULL, ippr_raudio_in, ippr_raudio_out, NULL, NULL }, 143ab25eeb5Syz155240 #endif 144ab25eeb5Syz155240 #ifdef IPF_MSNRPC_PROXY 145ab25eeb5Syz155240 { NULL, "msnrpc", (char)IPPROTO_TCP, 0, 0, ippr_msnrpc_init, ippr_msnrpc_fini, 146ab25eeb5Syz155240 ippr_msnrpc_new, NULL, ippr_msnrpc_in, ippr_msnrpc_out, NULL, NULL }, 147ab25eeb5Syz155240 #endif 148ab25eeb5Syz155240 #ifdef IPF_NETBIOS_PROXY 149ab25eeb5Syz155240 { NULL, "netbios", (char)IPPROTO_UDP, 0, 0, ippr_netbios_init, ippr_netbios_fini, 150ab25eeb5Syz155240 NULL, NULL, NULL, ippr_netbios_out, NULL, NULL }, 151ab25eeb5Syz155240 #endif 152ab25eeb5Syz155240 #ifdef IPF_IPSEC_PROXY 153ab25eeb5Syz155240 { NULL, "ipsec", (char)IPPROTO_UDP, 0, 0, 154ab25eeb5Syz155240 ippr_ipsec_init, ippr_ipsec_fini, ippr_ipsec_new, ippr_ipsec_del, 155ab25eeb5Syz155240 ippr_ipsec_inout, ippr_ipsec_inout, ippr_ipsec_match, NULL }, 156ab25eeb5Syz155240 #endif 157ab25eeb5Syz155240 #ifdef IPF_PPTP_PROXY 158ab25eeb5Syz155240 { NULL, "pptp", (char)IPPROTO_TCP, 0, 0, 159ab25eeb5Syz155240 ippr_pptp_init, ippr_pptp_fini, ippr_pptp_new, ippr_pptp_del, 160ab25eeb5Syz155240 ippr_pptp_inout, ippr_pptp_inout, NULL, NULL }, 161ab25eeb5Syz155240 #endif 162ab25eeb5Syz155240 #ifdef IPF_H323_PROXY 163ab25eeb5Syz155240 { NULL, "h323", (char)IPPROTO_TCP, 0, 0, ippr_h323_init, ippr_h323_fini, 164ab25eeb5Syz155240 ippr_h323_new, ippr_h323_del, ippr_h323_in, NULL, NULL }, 165ab25eeb5Syz155240 { NULL, "h245", (char)IPPROTO_TCP, 0, 0, NULL, NULL, 166ab25eeb5Syz155240 ippr_h245_new, NULL, NULL, ippr_h245_out, NULL }, 167ab25eeb5Syz155240 #endif 168ab25eeb5Syz155240 #ifdef IPF_RPCB_PROXY 169ab25eeb5Syz155240 # if 0 170ab25eeb5Syz155240 { NULL, "rpcbt", (char)IPPROTO_TCP, 0, 0, 171ab25eeb5Syz155240 ippr_rpcb_init, ippr_rpcb_fini, ippr_rpcb_new, ippr_rpcb_del, 172ab25eeb5Syz155240 ippr_rpcb_in, ippr_rpcb_out, NULL, NULL }, 173ab25eeb5Syz155240 # endif 174ab25eeb5Syz155240 { NULL, "rpcbu", (char)IPPROTO_UDP, 0, 0, 175ab25eeb5Syz155240 ippr_rpcb_init, ippr_rpcb_fini, ippr_rpcb_new, ippr_rpcb_del, 176ab25eeb5Syz155240 ippr_rpcb_in, ippr_rpcb_out, NULL, NULL }, 177ab25eeb5Syz155240 #endif 178ab25eeb5Syz155240 { NULL, "", '\0', 0, 0, NULL, NULL, NULL, NULL } 179ab25eeb5Syz155240 }; 180ab25eeb5Syz155240 181ab25eeb5Syz155240 /* 182ab25eeb5Syz155240 * Dynamically add a new kernel proxy. Ensure that it is unique in the 183ab25eeb5Syz155240 * collection compiled in and dynamically added. 184ab25eeb5Syz155240 */ 185ab25eeb5Syz155240 int appr_add(ap) 186ab25eeb5Syz155240 aproxy_t *ap; 187ab25eeb5Syz155240 { 188ab25eeb5Syz155240 aproxy_t *a; 189ab25eeb5Syz155240 190ab25eeb5Syz155240 for (a = ap_proxies; a->apr_p; a++) 191ab25eeb5Syz155240 if ((a->apr_p == ap->apr_p) && 192ab25eeb5Syz155240 !strncmp(a->apr_label, ap->apr_label, 193ab25eeb5Syz155240 sizeof(ap->apr_label))) { 194ab25eeb5Syz155240 if (ipf_proxy_debug > 1) 195ab25eeb5Syz155240 printf("appr_add: %s/%d already present (B)\n", 196ab25eeb5Syz155240 a->apr_label, a->apr_p); 197ab25eeb5Syz155240 return -1; 198ab25eeb5Syz155240 } 199ab25eeb5Syz155240 200ab25eeb5Syz155240 for (a = ap_proxylist; a->apr_p; a = a->apr_next) 201ab25eeb5Syz155240 if ((a->apr_p == ap->apr_p) && 202ab25eeb5Syz155240 !strncmp(a->apr_label, ap->apr_label, 203ab25eeb5Syz155240 sizeof(ap->apr_label))) { 204ab25eeb5Syz155240 if (ipf_proxy_debug > 1) 205ab25eeb5Syz155240 printf("appr_add: %s/%d already present (D)\n", 206ab25eeb5Syz155240 a->apr_label, a->apr_p); 207ab25eeb5Syz155240 return -1; 208ab25eeb5Syz155240 } 209ab25eeb5Syz155240 ap->apr_next = ap_proxylist; 210ab25eeb5Syz155240 ap_proxylist = ap; 211ab25eeb5Syz155240 if (ap->apr_init != NULL) 212ab25eeb5Syz155240 return (*ap->apr_init)(); 213ab25eeb5Syz155240 return 0; 214ab25eeb5Syz155240 } 215ab25eeb5Syz155240 216ab25eeb5Syz155240 217ab25eeb5Syz155240 /* 218ab25eeb5Syz155240 * Check to see if the proxy this control request has come through for 219ab25eeb5Syz155240 * exists, and if it does and it has a control function then invoke that 220ab25eeb5Syz155240 * control function. 221ab25eeb5Syz155240 */ 222ab25eeb5Syz155240 int appr_ctl(ctl) 223ab25eeb5Syz155240 ap_ctl_t *ctl; 224ab25eeb5Syz155240 { 225ab25eeb5Syz155240 aproxy_t *a; 226ab25eeb5Syz155240 int error; 227ab25eeb5Syz155240 228ab25eeb5Syz155240 a = appr_lookup(ctl->apc_p, ctl->apc_label); 229ab25eeb5Syz155240 if (a == NULL) { 230ab25eeb5Syz155240 if (ipf_proxy_debug > 1) 231ab25eeb5Syz155240 printf("appr_ctl: can't find %s/%d\n", 232ab25eeb5Syz155240 ctl->apc_label, ctl->apc_p); 233ab25eeb5Syz155240 error = ESRCH; 234ab25eeb5Syz155240 } else if (a->apr_ctl == NULL) { 235ab25eeb5Syz155240 if (ipf_proxy_debug > 1) 236ab25eeb5Syz155240 printf("appr_ctl: no ctl function for %s/%d\n", 237ab25eeb5Syz155240 ctl->apc_label, ctl->apc_p); 238ab25eeb5Syz155240 error = ENXIO; 239ab25eeb5Syz155240 } else { 240ab25eeb5Syz155240 error = (*a->apr_ctl)(a, ctl); 241ab25eeb5Syz155240 if ((error != 0) && (ipf_proxy_debug > 1)) 242ab25eeb5Syz155240 printf("appr_ctl: %s/%d ctl error %d\n", 243ab25eeb5Syz155240 a->apr_label, a->apr_p, error); 244ab25eeb5Syz155240 } 245ab25eeb5Syz155240 return error; 246ab25eeb5Syz155240 } 247ab25eeb5Syz155240 248ab25eeb5Syz155240 249ab25eeb5Syz155240 /* 250ab25eeb5Syz155240 * Delete a proxy that has been added dynamically from those available. 251ab25eeb5Syz155240 * If it is in use, return 1 (do not destroy NOW), not in use 0 or -1 252ab25eeb5Syz155240 * if it cannot be matched. 253ab25eeb5Syz155240 */ 254ab25eeb5Syz155240 int appr_del(ap) 255ab25eeb5Syz155240 aproxy_t *ap; 256ab25eeb5Syz155240 { 257ab25eeb5Syz155240 aproxy_t *a, **app; 258ab25eeb5Syz155240 259ab25eeb5Syz155240 for (app = &ap_proxylist; ((a = *app) != NULL); app = &a->apr_next) 260ab25eeb5Syz155240 if (a == ap) { 261ab25eeb5Syz155240 a->apr_flags |= APR_DELETE; 262ab25eeb5Syz155240 *app = a->apr_next; 263ab25eeb5Syz155240 if (ap->apr_ref != 0) { 264ab25eeb5Syz155240 if (ipf_proxy_debug > 2) 265ab25eeb5Syz155240 printf("appr_del: orphaning %s/%d\n", 266ab25eeb5Syz155240 ap->apr_label, ap->apr_p); 267ab25eeb5Syz155240 return 1; 268ab25eeb5Syz155240 } 269ab25eeb5Syz155240 return 0; 270ab25eeb5Syz155240 } 271ab25eeb5Syz155240 if (ipf_proxy_debug > 1) 272ab25eeb5Syz155240 printf("appr_del: proxy %lx not found\n", (u_long)ap); 273ab25eeb5Syz155240 return -1; 274ab25eeb5Syz155240 } 275ab25eeb5Syz155240 276ab25eeb5Syz155240 277ab25eeb5Syz155240 /* 278ab25eeb5Syz155240 * Return 1 if the packet is a good match against a proxy, else 0. 279ab25eeb5Syz155240 */ 280ab25eeb5Syz155240 int appr_ok(fin, tcp, nat) 281ab25eeb5Syz155240 fr_info_t *fin; 282ab25eeb5Syz155240 tcphdr_t *tcp; 283ab25eeb5Syz155240 ipnat_t *nat; 284ab25eeb5Syz155240 { 285ab25eeb5Syz155240 aproxy_t *apr = nat->in_apr; 286ab25eeb5Syz155240 u_short dport = nat->in_dport; 287ab25eeb5Syz155240 288ab25eeb5Syz155240 if ((apr == NULL) || (apr->apr_flags & APR_DELETE) || 289ab25eeb5Syz155240 (fin->fin_p != apr->apr_p)) 290ab25eeb5Syz155240 return 0; 291ab25eeb5Syz155240 if ((tcp == NULL) && dport) 292ab25eeb5Syz155240 return 0; 293ab25eeb5Syz155240 return 1; 294ab25eeb5Syz155240 } 295ab25eeb5Syz155240 296ab25eeb5Syz155240 297ab25eeb5Syz155240 int appr_ioctl(data, cmd, mode) 298ab25eeb5Syz155240 caddr_t data; 299ab25eeb5Syz155240 ioctlcmd_t cmd; 300ab25eeb5Syz155240 int mode; 301ab25eeb5Syz155240 { 302ab25eeb5Syz155240 ap_ctl_t ctl; 303ab25eeb5Syz155240 caddr_t ptr; 304ab25eeb5Syz155240 int error; 305ab25eeb5Syz155240 306ab25eeb5Syz155240 mode = mode; /* LINT */ 307ab25eeb5Syz155240 308ab25eeb5Syz155240 switch (cmd) 309ab25eeb5Syz155240 { 310ab25eeb5Syz155240 case SIOCPROXY : 311ab25eeb5Syz155240 (void) BCOPYIN(data, &ctl, sizeof(ctl)); 312ab25eeb5Syz155240 ptr = NULL; 313ab25eeb5Syz155240 314ab25eeb5Syz155240 if (ctl.apc_dsize > 0) { 315ab25eeb5Syz155240 KMALLOCS(ptr, caddr_t, ctl.apc_dsize); 316ab25eeb5Syz155240 if (ptr == NULL) 317ab25eeb5Syz155240 error = ENOMEM; 318ab25eeb5Syz155240 else { 319ab25eeb5Syz155240 error = copyinptr(ctl.apc_data, ptr, 320ab25eeb5Syz155240 ctl.apc_dsize); 321ab25eeb5Syz155240 if (error == 0) 322ab25eeb5Syz155240 ctl.apc_data = ptr; 323ab25eeb5Syz155240 } 324ab25eeb5Syz155240 } else { 325ab25eeb5Syz155240 ctl.apc_data = NULL; 326ab25eeb5Syz155240 error = 0; 327ab25eeb5Syz155240 } 328ab25eeb5Syz155240 329ab25eeb5Syz155240 if (error == 0) 330ab25eeb5Syz155240 error = appr_ctl(&ctl); 331ab25eeb5Syz155240 332ab25eeb5Syz155240 if ((ctl.apc_dsize > 0) && (ptr != NULL) && 333ab25eeb5Syz155240 (ctl.apc_data == ptr)) { 334ab25eeb5Syz155240 KFREES(ptr, ctl.apc_dsize); 335ab25eeb5Syz155240 } 336ab25eeb5Syz155240 break; 337ab25eeb5Syz155240 338ab25eeb5Syz155240 default : 339ab25eeb5Syz155240 error = EINVAL; 340ab25eeb5Syz155240 } 341ab25eeb5Syz155240 return error; 342ab25eeb5Syz155240 } 343ab25eeb5Syz155240 344ab25eeb5Syz155240 345ab25eeb5Syz155240 /* 346ab25eeb5Syz155240 * If a proxy has a match function, call that to do extended packet 347ab25eeb5Syz155240 * matching. 348ab25eeb5Syz155240 */ 349ab25eeb5Syz155240 int appr_match(fin, nat) 350ab25eeb5Syz155240 fr_info_t *fin; 351ab25eeb5Syz155240 nat_t *nat; 352ab25eeb5Syz155240 { 353ab25eeb5Syz155240 aproxy_t *apr; 354ab25eeb5Syz155240 ipnat_t *ipn; 355ab25eeb5Syz155240 int result; 356ab25eeb5Syz155240 357ab25eeb5Syz155240 ipn = nat->nat_ptr; 358ab25eeb5Syz155240 if (ipf_proxy_debug > 8) 359ab25eeb5Syz155240 printf("appr_match(%lx,%lx) aps %lx ptr %lx\n", 360ab25eeb5Syz155240 (u_long)fin, (u_long)nat, (u_long)nat->nat_aps, 361ab25eeb5Syz155240 (u_long)ipn); 362ab25eeb5Syz155240 363ab25eeb5Syz155240 if ((fin->fin_flx & (FI_SHORT|FI_BAD)) != 0) { 364ab25eeb5Syz155240 if (ipf_proxy_debug > 0) 365ab25eeb5Syz155240 printf("appr_match: flx 0x%x (BAD|SHORT)\n", 366ab25eeb5Syz155240 fin->fin_flx); 367ab25eeb5Syz155240 return -1; 368ab25eeb5Syz155240 } 369ab25eeb5Syz155240 370ab25eeb5Syz155240 apr = ipn->in_apr; 371ab25eeb5Syz155240 if ((apr == NULL) || (apr->apr_flags & APR_DELETE)) { 372ab25eeb5Syz155240 if (ipf_proxy_debug > 0) 373ab25eeb5Syz155240 printf("appr_match:apr %lx apr_flags 0x%x\n", 374ab25eeb5Syz155240 (u_long)apr, apr ? apr->apr_flags : 0); 375ab25eeb5Syz155240 return -1; 376ab25eeb5Syz155240 } 377ab25eeb5Syz155240 378ab25eeb5Syz155240 if (apr->apr_match != NULL) { 379ab25eeb5Syz155240 result = (*apr->apr_match)(fin, nat->nat_aps, nat); 380ab25eeb5Syz155240 if (result != 0) { 381ab25eeb5Syz155240 if (ipf_proxy_debug > 4) 382ab25eeb5Syz155240 printf("appr_match: result %d\n", result); 383ab25eeb5Syz155240 return -1; 384ab25eeb5Syz155240 } 385ab25eeb5Syz155240 } 386ab25eeb5Syz155240 return 0; 387ab25eeb5Syz155240 } 388ab25eeb5Syz155240 389ab25eeb5Syz155240 390ab25eeb5Syz155240 /* 391ab25eeb5Syz155240 * Allocate a new application proxy structure and fill it in with the 392ab25eeb5Syz155240 * relevant details. call the init function once complete, prior to 393ab25eeb5Syz155240 * returning. 394ab25eeb5Syz155240 */ 395ab25eeb5Syz155240 int appr_new(fin, nat) 396ab25eeb5Syz155240 fr_info_t *fin; 397ab25eeb5Syz155240 nat_t *nat; 398ab25eeb5Syz155240 { 399ab25eeb5Syz155240 register ap_session_t *aps; 400ab25eeb5Syz155240 aproxy_t *apr; 401ab25eeb5Syz155240 402ab25eeb5Syz155240 if (ipf_proxy_debug > 8) 403ab25eeb5Syz155240 printf("appr_new(%lx,%lx) \n", (u_long)fin, (u_long)nat); 404ab25eeb5Syz155240 405ab25eeb5Syz155240 if ((nat->nat_ptr == NULL) || (nat->nat_aps != NULL)) { 406ab25eeb5Syz155240 if (ipf_proxy_debug > 0) 407ab25eeb5Syz155240 printf("appr_new: nat_ptr %lx nat_aps %lx\n", 408ab25eeb5Syz155240 (u_long)nat->nat_ptr, (u_long)nat->nat_aps); 409ab25eeb5Syz155240 return -1; 410ab25eeb5Syz155240 } 411ab25eeb5Syz155240 412ab25eeb5Syz155240 apr = nat->nat_ptr->in_apr; 413ab25eeb5Syz155240 414ab25eeb5Syz155240 if ((apr->apr_flags & APR_DELETE) || 415ab25eeb5Syz155240 (fin->fin_p != apr->apr_p)) { 416ab25eeb5Syz155240 if (ipf_proxy_debug > 2) 417ab25eeb5Syz155240 printf("appr_new: apr_flags 0x%x p %d/%d\n", 418ab25eeb5Syz155240 apr->apr_flags, fin->fin_p, apr->apr_p); 419ab25eeb5Syz155240 return -1; 420ab25eeb5Syz155240 } 421ab25eeb5Syz155240 422ab25eeb5Syz155240 KMALLOC(aps, ap_session_t *); 423ab25eeb5Syz155240 if (!aps) { 424ab25eeb5Syz155240 if (ipf_proxy_debug > 0) 425ab25eeb5Syz155240 printf("appr_new: malloc failed (%lu)\n", 426ab25eeb5Syz155240 (u_long)sizeof(ap_session_t)); 427ab25eeb5Syz155240 return -1; 428ab25eeb5Syz155240 } 429ab25eeb5Syz155240 430ab25eeb5Syz155240 bzero((char *)aps, sizeof(*aps)); 431ab25eeb5Syz155240 aps->aps_p = fin->fin_p; 432ab25eeb5Syz155240 aps->aps_data = NULL; 433ab25eeb5Syz155240 aps->aps_apr = apr; 434ab25eeb5Syz155240 aps->aps_psiz = 0; 435ab25eeb5Syz155240 if (apr->apr_new != NULL) 436ab25eeb5Syz155240 if ((*apr->apr_new)(fin, aps, nat) == -1) { 437ab25eeb5Syz155240 if ((aps->aps_data != NULL) && (aps->aps_psiz != 0)) { 438ab25eeb5Syz155240 KFREES(aps->aps_data, aps->aps_psiz); 439ab25eeb5Syz155240 } 440ab25eeb5Syz155240 KFREE(aps); 441ab25eeb5Syz155240 if (ipf_proxy_debug > 2) 442ab25eeb5Syz155240 printf("appr_new: new(%lx) failed\n", 443ab25eeb5Syz155240 (u_long)apr->apr_new); 444ab25eeb5Syz155240 return -1; 445ab25eeb5Syz155240 } 446ab25eeb5Syz155240 aps->aps_nat = nat; 447ab25eeb5Syz155240 aps->aps_next = ap_sess_list; 448ab25eeb5Syz155240 ap_sess_list = aps; 449ab25eeb5Syz155240 nat->nat_aps = aps; 450ab25eeb5Syz155240 451ab25eeb5Syz155240 return 0; 452ab25eeb5Syz155240 } 453ab25eeb5Syz155240 454ab25eeb5Syz155240 455ab25eeb5Syz155240 /* 456ab25eeb5Syz155240 * Check to see if a packet should be passed through an active proxy routine 457ab25eeb5Syz155240 * if one has been setup for it. We don't need to check the checksum here if 458ab25eeb5Syz155240 * IPFILTER_CKSUM is defined because if it is, a failed check causes FI_BAD 459ab25eeb5Syz155240 * to be set. 460ab25eeb5Syz155240 */ 461ab25eeb5Syz155240 int appr_check(fin, nat) 462ab25eeb5Syz155240 fr_info_t *fin; 463ab25eeb5Syz155240 nat_t *nat; 464ab25eeb5Syz155240 { 465*381a2a9aSdr146992 #if SOLARIS && defined(_KERNEL) && (SOLARIS2 >= 6) && defined(ICK_VALID) 466ab25eeb5Syz155240 mb_t *m; 467ab25eeb5Syz155240 int dosum = 1; 468ab25eeb5Syz155240 #endif 469ab25eeb5Syz155240 tcphdr_t *tcp = NULL; 470ab25eeb5Syz155240 udphdr_t *udp = NULL; 471ab25eeb5Syz155240 ap_session_t *aps; 472ab25eeb5Syz155240 aproxy_t *apr; 473ab25eeb5Syz155240 ip_t *ip; 474ab25eeb5Syz155240 short rv; 475ab25eeb5Syz155240 int err; 476ab25eeb5Syz155240 #if !defined(_KERNEL) || defined(MENTAT) || defined(__sgi) 477ab25eeb5Syz155240 u_32_t s1, s2, sd; 478ab25eeb5Syz155240 #endif 479*381a2a9aSdr146992 #if SOLARIS && defined(_KERNEL) && (SOLARIS2 >= 6) 480*381a2a9aSdr146992 net_data_t net_data_p; 481*381a2a9aSdr146992 if (fin->fin_v == 4) 482*381a2a9aSdr146992 net_data_p = ipf_ipv4; 483*381a2a9aSdr146992 else 484*381a2a9aSdr146992 net_data_p = ipf_ipv6; 485*381a2a9aSdr146992 #endif 486ab25eeb5Syz155240 487ab25eeb5Syz155240 if (fin->fin_flx & FI_BAD) { 488ab25eeb5Syz155240 if (ipf_proxy_debug > 0) 489ab25eeb5Syz155240 printf("appr_check: flx 0x%x (BAD)\n", fin->fin_flx); 490ab25eeb5Syz155240 return -1; 491ab25eeb5Syz155240 } 492ab25eeb5Syz155240 493ab25eeb5Syz155240 #ifndef IPFILTER_CKSUM 494ab25eeb5Syz155240 if ((fin->fin_out == 0) && (fr_checkl4sum(fin) == -1)) { 495ab25eeb5Syz155240 if (ipf_proxy_debug > 0) 496ab25eeb5Syz155240 printf("appr_check: l4 checksum failure %d\n", 497ab25eeb5Syz155240 fin->fin_p); 498ab25eeb5Syz155240 if (fin->fin_p == IPPROTO_TCP) 499ab25eeb5Syz155240 frstats[fin->fin_out].fr_tcpbad++; 500ab25eeb5Syz155240 return -1; 501ab25eeb5Syz155240 } 502ab25eeb5Syz155240 #endif 503ab25eeb5Syz155240 504ab25eeb5Syz155240 aps = nat->nat_aps; 505ab25eeb5Syz155240 if ((aps != NULL) && (aps->aps_p == fin->fin_p)) { 506ab25eeb5Syz155240 /* 507ab25eeb5Syz155240 * If there is data in this packet to be proxied then try and 508ab25eeb5Syz155240 * get it all into the one buffer, else drop it. 509ab25eeb5Syz155240 */ 510ab25eeb5Syz155240 #if defined(MENTAT) || defined(HAVE_M_PULLDOWN) 511ab25eeb5Syz155240 if ((fin->fin_dlen > 0) && !(fin->fin_flx & FI_COALESCE)) 512ab25eeb5Syz155240 if (fr_coalesce(fin) == -1) { 513ab25eeb5Syz155240 if (ipf_proxy_debug > 0) 514ab25eeb5Syz155240 printf("appr_check: fr_coalesce failed %x\n", fin->fin_flx); 515ab25eeb5Syz155240 return -1; 516ab25eeb5Syz155240 } 517ab25eeb5Syz155240 #endif 518ab25eeb5Syz155240 ip = fin->fin_ip; 519ab25eeb5Syz155240 520ab25eeb5Syz155240 switch (fin->fin_p) 521ab25eeb5Syz155240 { 522ab25eeb5Syz155240 case IPPROTO_TCP : 523ab25eeb5Syz155240 tcp = (tcphdr_t *)fin->fin_dp; 524ab25eeb5Syz155240 525ab25eeb5Syz155240 #if SOLARIS && defined(_KERNEL) && (SOLARIS2 >= 6) && defined(ICK_VALID) 526ab25eeb5Syz155240 m = fin->fin_qfm; 527ab25eeb5Syz155240 if (dohwcksum && (m->b_ick_flag == ICK_VALID)) 528ab25eeb5Syz155240 dosum = 0; 529ab25eeb5Syz155240 #endif 530ab25eeb5Syz155240 /* 531ab25eeb5Syz155240 * Don't bother the proxy with these...or in fact, 532ab25eeb5Syz155240 * should we free up proxy stuff when seen? 533ab25eeb5Syz155240 */ 534ab25eeb5Syz155240 if ((fin->fin_tcpf & TH_RST) != 0) 535ab25eeb5Syz155240 break; 536ab25eeb5Syz155240 /*FALLTHROUGH*/ 537ab25eeb5Syz155240 case IPPROTO_UDP : 538ab25eeb5Syz155240 udp = (udphdr_t *)fin->fin_dp; 539ab25eeb5Syz155240 break; 540ab25eeb5Syz155240 default : 541ab25eeb5Syz155240 break; 542ab25eeb5Syz155240 } 543ab25eeb5Syz155240 544ab25eeb5Syz155240 apr = aps->aps_apr; 545ab25eeb5Syz155240 err = 0; 546ab25eeb5Syz155240 if (fin->fin_out != 0) { 547ab25eeb5Syz155240 if (apr->apr_outpkt != NULL) 548ab25eeb5Syz155240 err = (*apr->apr_outpkt)(fin, aps, nat); 549ab25eeb5Syz155240 } else { 550ab25eeb5Syz155240 if (apr->apr_inpkt != NULL) 551ab25eeb5Syz155240 err = (*apr->apr_inpkt)(fin, aps, nat); 552ab25eeb5Syz155240 } 553ab25eeb5Syz155240 554ab25eeb5Syz155240 rv = APR_EXIT(err); 555ab25eeb5Syz155240 if (((ipf_proxy_debug > 0) && (rv != 0)) || 556ab25eeb5Syz155240 (ipf_proxy_debug > 8)) 557ab25eeb5Syz155240 printf("appr_check: out %d err %x rv %d\n", 558ab25eeb5Syz155240 fin->fin_out, err, rv); 559ab25eeb5Syz155240 if (rv == 1) 560ab25eeb5Syz155240 return -1; 561ab25eeb5Syz155240 562ab25eeb5Syz155240 if (rv == 2) { 563ab25eeb5Syz155240 appr_free(apr); 564ab25eeb5Syz155240 nat->nat_aps = NULL; 565ab25eeb5Syz155240 return -1; 566ab25eeb5Syz155240 } 567ab25eeb5Syz155240 568ab25eeb5Syz155240 /* 569ab25eeb5Syz155240 * If err != 0 then the data size of the packet has changed 570ab25eeb5Syz155240 * so we need to recalculate the header checksums for the 571ab25eeb5Syz155240 * packet. 572*381a2a9aSdr146992 * inbound packets always need to be adjusted. 573ab25eeb5Syz155240 */ 574ab25eeb5Syz155240 #if !defined(_KERNEL) || defined(MENTAT) || defined(__sgi) 575*381a2a9aSdr146992 if (err != 0 && (!fin->fin_out || 576*381a2a9aSdr146992 !NET_IS_HCK_L3_FULL(net_data_p, fin->fin_m))) { 577ab25eeb5Syz155240 short adjlen = err & 0xffff; 578ab25eeb5Syz155240 579ab25eeb5Syz155240 s1 = LONG_SUM(ip->ip_len - adjlen); 580ab25eeb5Syz155240 s2 = LONG_SUM(ip->ip_len); 581ab25eeb5Syz155240 CALC_SUMD(s1, s2, sd); 582*381a2a9aSdr146992 fix_outcksum(&ip->ip_sum, sd); 583ab25eeb5Syz155240 } 584ab25eeb5Syz155240 #endif 585ab25eeb5Syz155240 586ab25eeb5Syz155240 /* 587ab25eeb5Syz155240 * For TCP packets, we may need to adjust the sequence and 588ab25eeb5Syz155240 * acknowledgement numbers to reflect changes in size of the 589ab25eeb5Syz155240 * data stream. 590ab25eeb5Syz155240 * 591ab25eeb5Syz155240 * For both TCP and UDP, recalculate the layer 4 checksum, 592ab25eeb5Syz155240 * regardless, as we can't tell (here) if data has been 593ab25eeb5Syz155240 * changed or not. 594ab25eeb5Syz155240 */ 595ab25eeb5Syz155240 if (tcp != NULL) { 596ab25eeb5Syz155240 err = appr_fixseqack(fin, ip, aps, APR_INC(err)); 597ab25eeb5Syz155240 #if SOLARIS && defined(_KERNEL) && (SOLARIS2 >= 6) 598*381a2a9aSdr146992 if (!fin->fin_out || 599*381a2a9aSdr146992 !NET_IS_HCK_L4_FULL(net_data_p, fin->fin_m) && 600*381a2a9aSdr146992 !NET_IS_HCK_L4_PART(net_data_p, fin->fin_m)) 601ab25eeb5Syz155240 tcp->th_sum = fr_cksum(fin->fin_qfm, ip, 602ab25eeb5Syz155240 IPPROTO_TCP, tcp); 603ab25eeb5Syz155240 #else 604ab25eeb5Syz155240 tcp->th_sum = fr_cksum(fin->fin_m, ip, 605ab25eeb5Syz155240 IPPROTO_TCP, tcp); 606ab25eeb5Syz155240 #endif 607ab25eeb5Syz155240 } else if ((udp != NULL) && (udp->uh_sum != 0)) { 608ab25eeb5Syz155240 #if SOLARIS && defined(_KERNEL) && (SOLARIS2 >= 6) 609*381a2a9aSdr146992 if (!fin->fin_out || 610*381a2a9aSdr146992 !NET_IS_HCK_L4_FULL(net_data_p, fin->fin_m) && 611*381a2a9aSdr146992 !NET_IS_HCK_L4_PART(net_data_p, fin->fin_m)) 612ab25eeb5Syz155240 udp->uh_sum = fr_cksum(fin->fin_qfm, ip, 613ab25eeb5Syz155240 IPPROTO_UDP, udp); 614ab25eeb5Syz155240 #else 615ab25eeb5Syz155240 udp->uh_sum = fr_cksum(fin->fin_m, ip, 616ab25eeb5Syz155240 IPPROTO_UDP, udp); 617ab25eeb5Syz155240 #endif 618ab25eeb5Syz155240 } 619ab25eeb5Syz155240 aps->aps_bytes += fin->fin_plen; 620ab25eeb5Syz155240 aps->aps_pkts++; 621ab25eeb5Syz155240 return 1; 622ab25eeb5Syz155240 } 623ab25eeb5Syz155240 return 0; 624ab25eeb5Syz155240 } 625ab25eeb5Syz155240 626ab25eeb5Syz155240 627ab25eeb5Syz155240 /* 628ab25eeb5Syz155240 * Search for an proxy by the protocol it is being used with and its name. 629ab25eeb5Syz155240 */ 630ab25eeb5Syz155240 aproxy_t *appr_lookup(pr, name) 631ab25eeb5Syz155240 u_int pr; 632ab25eeb5Syz155240 char *name; 633ab25eeb5Syz155240 { 634ab25eeb5Syz155240 aproxy_t *ap; 635ab25eeb5Syz155240 636ab25eeb5Syz155240 if (ipf_proxy_debug > 8) 637ab25eeb5Syz155240 printf("appr_lookup(%d,%s)\n", pr, name); 638ab25eeb5Syz155240 639ab25eeb5Syz155240 for (ap = ap_proxies; ap->apr_p; ap++) 640ab25eeb5Syz155240 if ((ap->apr_p == pr) && 641ab25eeb5Syz155240 !strncmp(name, ap->apr_label, sizeof(ap->apr_label))) { 642ab25eeb5Syz155240 ap->apr_ref++; 643ab25eeb5Syz155240 return ap; 644ab25eeb5Syz155240 } 645ab25eeb5Syz155240 646ab25eeb5Syz155240 for (ap = ap_proxylist; ap; ap = ap->apr_next) 647ab25eeb5Syz155240 if ((ap->apr_p == pr) && 648ab25eeb5Syz155240 !strncmp(name, ap->apr_label, sizeof(ap->apr_label))) { 649ab25eeb5Syz155240 ap->apr_ref++; 650ab25eeb5Syz155240 return ap; 651ab25eeb5Syz155240 } 652ab25eeb5Syz155240 if (ipf_proxy_debug > 2) 653ab25eeb5Syz155240 printf("appr_lookup: failed for %d/%s\n", pr, name); 654ab25eeb5Syz155240 return NULL; 655ab25eeb5Syz155240 } 656ab25eeb5Syz155240 657ab25eeb5Syz155240 658ab25eeb5Syz155240 void appr_free(ap) 659ab25eeb5Syz155240 aproxy_t *ap; 660ab25eeb5Syz155240 { 661ab25eeb5Syz155240 ap->apr_ref--; 662ab25eeb5Syz155240 } 663ab25eeb5Syz155240 664ab25eeb5Syz155240 665ab25eeb5Syz155240 void aps_free(aps) 666ab25eeb5Syz155240 ap_session_t *aps; 667ab25eeb5Syz155240 { 668ab25eeb5Syz155240 ap_session_t *a, **ap; 669ab25eeb5Syz155240 aproxy_t *apr; 670ab25eeb5Syz155240 671ab25eeb5Syz155240 if (!aps) 672ab25eeb5Syz155240 return; 673ab25eeb5Syz155240 674ab25eeb5Syz155240 for (ap = &ap_sess_list; ((a = *ap) != NULL); ap = &a->aps_next) 675ab25eeb5Syz155240 if (a == aps) { 676ab25eeb5Syz155240 *ap = a->aps_next; 677ab25eeb5Syz155240 break; 678ab25eeb5Syz155240 } 679ab25eeb5Syz155240 680ab25eeb5Syz155240 apr = aps->aps_apr; 681ab25eeb5Syz155240 if ((apr != NULL) && (apr->apr_del != NULL)) 682ab25eeb5Syz155240 (*apr->apr_del)(aps); 683ab25eeb5Syz155240 684ab25eeb5Syz155240 if ((aps->aps_data != NULL) && (aps->aps_psiz != 0)) 685ab25eeb5Syz155240 KFREES(aps->aps_data, aps->aps_psiz); 686ab25eeb5Syz155240 KFREE(aps); 687ab25eeb5Syz155240 } 688ab25eeb5Syz155240 689ab25eeb5Syz155240 690ab25eeb5Syz155240 /* 691ab25eeb5Syz155240 * returns 2 if ack or seq number in TCP header is changed, returns 0 otherwise 692ab25eeb5Syz155240 */ 693ab25eeb5Syz155240 static int appr_fixseqack(fin, ip, aps, inc) 694ab25eeb5Syz155240 fr_info_t *fin; 695ab25eeb5Syz155240 ip_t *ip; 696ab25eeb5Syz155240 ap_session_t *aps; 697ab25eeb5Syz155240 int inc; 698ab25eeb5Syz155240 { 699ab25eeb5Syz155240 int sel, ch = 0, out, nlen; 700ab25eeb5Syz155240 u_32_t seq1, seq2; 701ab25eeb5Syz155240 tcphdr_t *tcp; 702ab25eeb5Syz155240 short inc2; 703ab25eeb5Syz155240 704ab25eeb5Syz155240 tcp = (tcphdr_t *)fin->fin_dp; 705ab25eeb5Syz155240 out = fin->fin_out; 706ab25eeb5Syz155240 /* 707ab25eeb5Syz155240 * ip_len has already been adjusted by 'inc'. 708ab25eeb5Syz155240 */ 709ab25eeb5Syz155240 nlen = ip->ip_len; 710ab25eeb5Syz155240 nlen -= (IP_HL(ip) << 2) + (TCP_OFF(tcp) << 2); 711ab25eeb5Syz155240 712ab25eeb5Syz155240 inc2 = inc; 713ab25eeb5Syz155240 inc = (int)inc2; 714ab25eeb5Syz155240 715ab25eeb5Syz155240 if (out != 0) { 716ab25eeb5Syz155240 seq1 = (u_32_t)ntohl(tcp->th_seq); 717ab25eeb5Syz155240 sel = aps->aps_sel[out]; 718ab25eeb5Syz155240 719ab25eeb5Syz155240 /* switch to other set ? */ 720ab25eeb5Syz155240 if ((aps->aps_seqmin[!sel] > aps->aps_seqmin[sel]) && 721ab25eeb5Syz155240 (seq1 > aps->aps_seqmin[!sel])) { 722ab25eeb5Syz155240 if (ipf_proxy_debug > 7) 723ab25eeb5Syz155240 printf("proxy out switch set seq %d -> %d %x > %x\n", 724ab25eeb5Syz155240 sel, !sel, seq1, 725ab25eeb5Syz155240 aps->aps_seqmin[!sel]); 726ab25eeb5Syz155240 sel = aps->aps_sel[out] = !sel; 727ab25eeb5Syz155240 } 728ab25eeb5Syz155240 729ab25eeb5Syz155240 if (aps->aps_seqoff[sel]) { 730ab25eeb5Syz155240 seq2 = aps->aps_seqmin[sel] - aps->aps_seqoff[sel]; 731ab25eeb5Syz155240 if (seq1 > seq2) { 732ab25eeb5Syz155240 seq2 = aps->aps_seqoff[sel]; 733ab25eeb5Syz155240 seq1 += seq2; 734ab25eeb5Syz155240 tcp->th_seq = htonl(seq1); 735ab25eeb5Syz155240 ch = 1; 736ab25eeb5Syz155240 } 737ab25eeb5Syz155240 } 738ab25eeb5Syz155240 739ab25eeb5Syz155240 if (inc && (seq1 > aps->aps_seqmin[!sel])) { 740ab25eeb5Syz155240 aps->aps_seqmin[sel] = seq1 + nlen - 1; 741ab25eeb5Syz155240 aps->aps_seqoff[sel] = aps->aps_seqoff[sel] + inc; 742ab25eeb5Syz155240 if (ipf_proxy_debug > 7) 743ab25eeb5Syz155240 printf("proxy seq set %d at %x to %d + %d\n", 744ab25eeb5Syz155240 sel, aps->aps_seqmin[sel], 745ab25eeb5Syz155240 aps->aps_seqoff[sel], inc); 746ab25eeb5Syz155240 } 747ab25eeb5Syz155240 748ab25eeb5Syz155240 /***/ 749ab25eeb5Syz155240 750ab25eeb5Syz155240 seq1 = ntohl(tcp->th_ack); 751ab25eeb5Syz155240 sel = aps->aps_sel[1 - out]; 752ab25eeb5Syz155240 753ab25eeb5Syz155240 /* switch to other set ? */ 754ab25eeb5Syz155240 if ((aps->aps_ackmin[!sel] > aps->aps_ackmin[sel]) && 755ab25eeb5Syz155240 (seq1 > aps->aps_ackmin[!sel])) { 756ab25eeb5Syz155240 if (ipf_proxy_debug > 7) 757ab25eeb5Syz155240 printf("proxy out switch set ack %d -> %d %x > %x\n", 758ab25eeb5Syz155240 sel, !sel, seq1, 759ab25eeb5Syz155240 aps->aps_ackmin[!sel]); 760ab25eeb5Syz155240 sel = aps->aps_sel[1 - out] = !sel; 761ab25eeb5Syz155240 } 762ab25eeb5Syz155240 763ab25eeb5Syz155240 if (aps->aps_ackoff[sel] && (seq1 > aps->aps_ackmin[sel])) { 764ab25eeb5Syz155240 seq2 = aps->aps_ackoff[sel]; 765ab25eeb5Syz155240 tcp->th_ack = htonl(seq1 - seq2); 766ab25eeb5Syz155240 ch = 1; 767ab25eeb5Syz155240 } 768ab25eeb5Syz155240 } else { 769ab25eeb5Syz155240 seq1 = ntohl(tcp->th_seq); 770ab25eeb5Syz155240 sel = aps->aps_sel[out]; 771ab25eeb5Syz155240 772ab25eeb5Syz155240 /* switch to other set ? */ 773ab25eeb5Syz155240 if ((aps->aps_ackmin[!sel] > aps->aps_ackmin[sel]) && 774ab25eeb5Syz155240 (seq1 > aps->aps_ackmin[!sel])) { 775ab25eeb5Syz155240 if (ipf_proxy_debug > 7) 776ab25eeb5Syz155240 printf("proxy in switch set ack %d -> %d %x > %x\n", 777ab25eeb5Syz155240 sel, !sel, seq1, aps->aps_ackmin[!sel]); 778ab25eeb5Syz155240 sel = aps->aps_sel[out] = !sel; 779ab25eeb5Syz155240 } 780ab25eeb5Syz155240 781ab25eeb5Syz155240 if (aps->aps_ackoff[sel]) { 782ab25eeb5Syz155240 seq2 = aps->aps_ackmin[sel] - aps->aps_ackoff[sel]; 783ab25eeb5Syz155240 if (seq1 > seq2) { 784ab25eeb5Syz155240 seq2 = aps->aps_ackoff[sel]; 785ab25eeb5Syz155240 seq1 += seq2; 786ab25eeb5Syz155240 tcp->th_seq = htonl(seq1); 787ab25eeb5Syz155240 ch = 1; 788ab25eeb5Syz155240 } 789ab25eeb5Syz155240 } 790ab25eeb5Syz155240 791ab25eeb5Syz155240 if (inc && (seq1 > aps->aps_ackmin[!sel])) { 792ab25eeb5Syz155240 aps->aps_ackmin[!sel] = seq1 + nlen - 1; 793ab25eeb5Syz155240 aps->aps_ackoff[!sel] = aps->aps_ackoff[sel] + inc; 794ab25eeb5Syz155240 795ab25eeb5Syz155240 if (ipf_proxy_debug > 7) 796ab25eeb5Syz155240 printf("proxy ack set %d at %x to %d + %d\n", 797ab25eeb5Syz155240 !sel, aps->aps_seqmin[!sel], 798ab25eeb5Syz155240 aps->aps_seqoff[sel], inc); 799ab25eeb5Syz155240 } 800ab25eeb5Syz155240 801ab25eeb5Syz155240 /***/ 802ab25eeb5Syz155240 803ab25eeb5Syz155240 seq1 = ntohl(tcp->th_ack); 804ab25eeb5Syz155240 sel = aps->aps_sel[1 - out]; 805ab25eeb5Syz155240 806ab25eeb5Syz155240 /* switch to other set ? */ 807ab25eeb5Syz155240 if ((aps->aps_seqmin[!sel] > aps->aps_seqmin[sel]) && 808ab25eeb5Syz155240 (seq1 > aps->aps_seqmin[!sel])) { 809ab25eeb5Syz155240 if (ipf_proxy_debug > 7) 810ab25eeb5Syz155240 printf("proxy in switch set seq %d -> %d %x > %x\n", 811ab25eeb5Syz155240 sel, !sel, seq1, aps->aps_seqmin[!sel]); 812ab25eeb5Syz155240 sel = aps->aps_sel[1 - out] = !sel; 813ab25eeb5Syz155240 } 814ab25eeb5Syz155240 815ab25eeb5Syz155240 if (aps->aps_seqoff[sel] != 0) { 816ab25eeb5Syz155240 if (ipf_proxy_debug > 7) 817ab25eeb5Syz155240 printf("sel %d seqoff %d seq1 %x seqmin %x\n", 818ab25eeb5Syz155240 sel, aps->aps_seqoff[sel], seq1, 819ab25eeb5Syz155240 aps->aps_seqmin[sel]); 820ab25eeb5Syz155240 if (seq1 > aps->aps_seqmin[sel]) { 821ab25eeb5Syz155240 seq2 = aps->aps_seqoff[sel]; 822ab25eeb5Syz155240 tcp->th_ack = htonl(seq1 - seq2); 823ab25eeb5Syz155240 ch = 1; 824ab25eeb5Syz155240 } 825ab25eeb5Syz155240 } 826ab25eeb5Syz155240 } 827ab25eeb5Syz155240 828ab25eeb5Syz155240 if (ipf_proxy_debug > 8) 829ab25eeb5Syz155240 printf("appr_fixseqack: seq %x ack %x\n", 830ab25eeb5Syz155240 ntohl(tcp->th_seq), ntohl(tcp->th_ack)); 831ab25eeb5Syz155240 return ch ? 2 : 0; 832ab25eeb5Syz155240 } 833ab25eeb5Syz155240 834ab25eeb5Syz155240 835ab25eeb5Syz155240 /* 836ab25eeb5Syz155240 * Initialise hook for kernel application proxies. 837ab25eeb5Syz155240 * Call the initialise routine for all the compiled in kernel proxies. 838ab25eeb5Syz155240 */ 839ab25eeb5Syz155240 int appr_init() 840ab25eeb5Syz155240 { 841ab25eeb5Syz155240 aproxy_t *ap; 842ab25eeb5Syz155240 int err = 0; 843ab25eeb5Syz155240 844ab25eeb5Syz155240 for (ap = ap_proxies; ap->apr_p; ap++) { 845ab25eeb5Syz155240 if (ap->apr_init != NULL) { 846ab25eeb5Syz155240 err = (*ap->apr_init)(); 847ab25eeb5Syz155240 if (err != 0) 848ab25eeb5Syz155240 break; 849ab25eeb5Syz155240 } 850ab25eeb5Syz155240 } 851ab25eeb5Syz155240 return err; 852ab25eeb5Syz155240 } 853ab25eeb5Syz155240 854ab25eeb5Syz155240 855ab25eeb5Syz155240 /* 856ab25eeb5Syz155240 * Unload hook for kernel application proxies. 857ab25eeb5Syz155240 * Call the finialise routine for all the compiled in kernel proxies. 858ab25eeb5Syz155240 */ 859ab25eeb5Syz155240 void appr_unload() 860ab25eeb5Syz155240 { 861ab25eeb5Syz155240 aproxy_t *ap; 862ab25eeb5Syz155240 863ab25eeb5Syz155240 for (ap = ap_proxies; ap->apr_p; ap++) 864ab25eeb5Syz155240 if (ap->apr_fini != NULL) 865ab25eeb5Syz155240 (*ap->apr_fini)(); 866ab25eeb5Syz155240 for (ap = ap_proxylist; ap; ap = ap->apr_next) 867ab25eeb5Syz155240 if (ap->apr_fini != NULL) 868ab25eeb5Syz155240 (*ap->apr_fini)(); 869ab25eeb5Syz155240 } 870